bcgov / bcgov/PSP

ZAP Full Scan Report

Open
#251 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TSQL
Stars
7
Forks
27
Avg merge
3d 16h
Merged PRs (30d)
26

Description

- Site: [https://dev-pims.th.gov.bc.ca](https://dev-pims.th.gov.bc.ca)
**New Alerts**
- **Timestamp Disclosure - Unix** [10096] total: 20:
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- ..
- **Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)** [10037] total: 11:
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.2d4bc972.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.2d4bc972.js)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- [https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- **Proxy Disclosure** [40025] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static](https://dev-pims.th.gov.bc.ca/static)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- ..
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 11:
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.2d4bc972.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.2d4bc972.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- ..
- **Cookie Slack Detector** [90027] total: 15:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- [https://dev-pims.th.gov.bc.ca/static/js](https://dev-pims.th.gov.bc.ca/static/js)
- [https://dev-pims.th.gov.bc.ca/static/css](https://dev-pims.th.gov.bc.ca/static/css)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 2:
- [https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- **Modern Web Application** [10109] total: 4:
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)

View the [following link](https://github.com/bcgov/PSP/actions/runs/1262220556) to download the report.
RunnerID:1262220556

Contributor guide

No contributing guide indexed for this repository

Research direction

Download the ZAP report from the linked GitHub Actions run and review the listed header, cookie, proxy, timestamp, and comment alerts. Trace each alert to the relevant deployment or server configuration, then rerun the scan and confirm the reported findings are resolved.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.